feat(modules/dgn-ssh): Disable kbdinteractiveauthentication
Some checks are pending
build configuration / build_web02 (push) Successful in 57s
build configuration / build_storage01 (push) Successful in 1m0s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web01 (push) Successful in 1m19s
build configuration / build_compute01 (push) Successful in 1m21s
ds-fr update / npins_update (push) Successful in 1m50s
npins update / npins_update (push) Has started running

This commit is contained in:
Tom Hubrecht 2024-01-30 10:22:27 +01:00
parent 073a816fd6
commit ef460753a8

View file

@ -35,23 +35,26 @@
{ config, lib, ... }:
let
inherit (lib)
mkEnableOption
mkIf;
inherit (lib) mkEnableOption mkIf;
cfg = config.dgn-ssh;
in
{
options.dgn-ssh = {
enable = mkEnableOption "ssh default configuration." // { default = true; };
enable = mkEnableOption "ssh default configuration." // {
default = true;
};
};
config = mkIf cfg.enable {
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
};
programs.mosh.enable = true;